/** Matches the header line of a PEM private-key block. */
export declare const PRIVATE_KEY_BLOCK: RegExp;
/** True when a diff file path (or rename source) matches the sensitive list. */
export declare function isSensitiveDiffPath(path: string): boolean;
/** Replace high-confidence credential shapes inside hunk text with `[redacted]`. */
export declare function redactSecretTokens(text: string): string;